PT-2026-32052 · Palo Alto Networks+1 · Palo Alto Networks Autonomous Digital Experience Manager+1

David Fischer · Published 2026-04-08 · Updated 2026-04-13 · CVE-2026-0233

Positive Technologies (AI Summary)

CVSS v2.0

8.3

High

Base vector

AV:A/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Autonomous Digital Experience Manager on Windows (affected versions not specified)

Description A certificate validation issue exists in Palo Alto Networks Autonomous Digital Experience Manager on Windows. An unauthenticated attacker with adjacent network access can execute arbitrary code with NT AUTHORITYSYSTEM privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

BDU:2026-04969

CVE-2026-0233

Affected Products

Palo Alto Networks Autonomous Digital Experience Manager

Windows

References · 5

• https://security.paloaltonetworks.com/CVE-2026-0233 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04969 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-0233 · Security Note
• https://twitter.com/VulmonFeeds/status/2043693771565441227 · Twitter Post
• https://twitter.com/CVEnew/status/2043733061398126890 · Twitter Post